$ rpki-client -vvf repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft File: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft (raw, json) Hash identifier: 3bgquoq32hRqxL5FgQ5dWSakJ0QSdcJqK9Ktg4UR2MU= Subject key identifier: B6:81:49:39:01:43:0A:B3:9F:A6:B0:9D:B7:B9:12:DB:0C:C3:41:19 Authority key identifier: 84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F Certificate issuer: /CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Certificate serial: 1B75A0FA8CEF50DCEAFD2B247768675BCB3D12A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft Manifest number: 01E5 Signing time: Tue 04 Nov 2025 07:02:03 +0000 Manifest this update: Tue 04 Nov 2025 06:57:03 +0000 Manifest next update: Fri 07 Nov 2025 09:36:03 +0000 Files and hashes: 1: 849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl (hash: uhfGPUoyk1syjoNzDsLlJOHSzxWzyOGwFBiavQuI5ys=) 2: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: qsAO4cOsO4ax3oPbTen8Sd837s3C+50yjyG9ueyoUI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 09:36:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:75:a0:fa:8c:ef:50:dc:ea:fd:2b:24:77:68:67:5b:cb:3d:12:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F Validity Not Before: Nov 4 06:57:03 2025 GMT Not After : Nov 7 09:36:03 2025 GMT Subject: CN=B681493901430AB39FA6B09DB7B912DB0CC34119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:47:64:e8:3e:93:f6:86:d1:13:68:78:e2:21: bd:73:87:c2:96:b5:4f:21:d0:95:14:14:21:0c:76: 85:3b:a3:f8:61:a6:cb:5d:86:f3:e4:03:12:74:5c: 42:8c:a9:bf:35:df:ce:16:17:a8:f7:cd:53:34:1b: cd:7d:db:27:fc:ed:58:8b:fa:a7:90:3e:c9:09:d4: f8:e7:e0:fa:2e:7b:16:e7:cf:3c:9b:4a:14:63:31: 7e:11:9f:76:21:41:d9:46:08:13:68:fc:d4:45:25: 34:da:9b:31:7d:e3:15:ea:26:45:cd:23:28:12:a1: 23:de:67:5a:f5:e7:70:45:92:4c:3a:43:09:2f:82: 07:f5:20:9e:15:f1:eb:56:3c:d2:ab:69:59:a0:bf: 80:6d:69:6d:29:cc:cf:10:98:d9:13:bd:a2:29:30: 56:96:db:a7:0e:80:c9:31:7a:d4:ab:f9:07:b3:e8: b8:02:71:e0:09:0c:f6:74:7a:ff:62:b0:96:9d:a9: f0:f9:1f:21:fd:5f:7d:49:2f:4e:b3:fc:59:aa:f8: 27:a5:b9:86:fe:e0:73:20:52:08:34:0b:2b:1b:27: 54:44:14:00:92:ce:6d:5e:81:a9:fb:e0:fd:b5:76: 7e:48:db:2e:da:d7:37:33:85:ab:63:af:e6:c1:fc: 78:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:81:49:39:01:43:0A:B3:9F:A6:B0:9D:B7:B9:12:DB:0C:C3:41:19 X509v3 Authority Key Identifier: keyid:84:9E:9E:24:0A:6B:F4:42:3B:1E:7D:22:05:D4:1E:C8:0D:6E:AB:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/849E9E240A6BF4423B1E7D2205D41EC80D6EAB4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:e3:0f:6f:bf:b6:3d:cd:31:bb:6d:b3:da:47:50:bc:56:9d: c3:cc:73:fe:e0:40:88:d7:e2:0b:19:04:d3:bf:5f:1e:05:81: fc:53:84:5e:63:7d:76:29:92:00:83:98:b1:7e:fc:19:11:04: 92:e5:96:13:ab:2a:de:cc:a0:5c:91:f9:18:dc:ce:04:ae:56: f2:1d:e8:64:8e:56:41:73:8e:c0:b1:e2:4f:c6:7b:20:56:07: 32:1b:e4:bd:1e:08:88:84:08:63:33:1c:d0:ad:77:46:28:01: 63:51:f6:5f:48:68:db:00:6e:71:0b:67:e0:df:52:b7:9e:f8: c5:7a:3b:61:cc:92:11:2d:04:e1:4e:a7:72:bf:ad:c8:8c:9a: 91:66:13:62:0e:5e:5f:e3:c2:aa:7a:ca:75:92:ac:5c:f0:2e: 21:40:58:b1:2e:64:70:8b:f3:8e:c8:74:67:88:6f:bd:71:70: 5a:1b:0d:50:a9:72:f4:16:e0:b6:dc:7d:b2:8e:25:51:fb:cb: 18:14:8d:7f:bc:97:c5:b9:34:88:59:11:f5:c0:10:f2:05:73: 0b:ac:aa:65:9c:37:68:55:01:99:e6:78:75:e1:4d:46:83:a0: f8:e1:90:aa:82:2e:4a:5f:30:cf:c8:09:92:04:46:be:62:5b: 33:d0:14:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG3Wg+ozvUNzq/Sskd2hnW8s9EqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgw RDZFQUI0RjAeFw0yNTExMDQwNjU3MDNaFw0yNTExMDcwOTM2MDNaMDMxMTAvBgNV BAMTKEI2ODE0OTM5MDE0MzBBQjM5RkE2QjA5REI3QjkxMkRCMENDMzQxMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlR2ToPpP2htETaHjiIb1zh8KW tU8h0JUUFCEMdoU7o/hhpstdhvPkAxJ0XEKMqb81384WF6j3zVM0G8192yf87ViL +qeQPskJ1Pjn4PouexbnzzybShRjMX4Rn3YhQdlGCBNo/NRFJTTamzF94xXqJkXN IygSoSPeZ1r153BFkkw6Qwkvggf1IJ4V8etWPNKraVmgv4BtaW0pzM8QmNkTvaIp MFaW26cOgMkxetSr+Qez6LgCceAJDPZ0ev9isJadqfD5HyH9X31JL06z/Fmq+Cel uYb+4HMgUgg0CysbJ1REFACSzm1egan74P21dn5I2y7a1zczhatjr+bB/HiHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtoFJOQFDCrOfprCdt7kS2wzDQRkwHwYDVR0j BBgwFoAUhJ6eJApr9EI7Hn0iBdQeyA1uq08wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWViNDVkZS01MTgzLTRhM2EtYjA2ZC04YmI4ZDQ1MDZiMDYvMC84NDlFOUUyNDBB NkJGNDQyM0IxRTdEMjIwNUQ0MUVDODBENkVBQjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFFQzgwRDZF QUI0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVlYjQ1ZGUtNTE4My00YTNhLWIw NmQtOGJiOGQ0NTA2YjA2LzAvODQ5RTlFMjQwQTZCRjQ0MjNCMUU3RDIyMDVENDFF QzgwRDZFQUI0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMrjD2+/tj3NMbtts9pHULxWncPMc/7gQIjX 4gsZBNO/Xx4FgfxThF5jfXYpkgCDmLF+/BkRBJLllhOrKt7MoFyR+RjczgSuVvId 6GSOVkFzjsCx4k/GeyBWBzIb5L0eCIiECGMzHNCtd0YoAWNR9l9IaNsAbnELZ+Df Uree+MV6O2HMkhEtBOFOp3K/rciMmpFmE2IOXl/jwqp6ynWSrFzwLiFAWLEuZHCL 847IdGeIb71xcFobDVCpcvQW4LbcfbKOJVH7yxgUjX+8l8W5NIhZEfXAEPIFcwus qmWcN2hVAZnmeHXhTUaDoPjhkKqCLkpfMM/ICZIERr5iWzPQFMU= -----END CERTIFICATE-----Generated at Tue Nov 4 12:44:28 2025 by rpki-client